2016 CVE Vulnerabilities

10,656 CVEs published in 2016.

CVE IDSeverityCVSSDescription
CVE-2016-9497——Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, is vulnerable to an authentication...
CVE-2016-9496——Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, lacks authentication. An unauthent...
CVE-2016-9495——Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, uses hard coded credentials. Acces...
CVE-2016-9494——Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, are potentially vulnerable to impr...
CVE-2016-9493——The code generated by PHP FormMail Generator prior to 17 December 2016 is vulnerable to stored cross-site scripting. In ...
CVE-2016-9492——The code generated by PHP FormMail Generator prior to 17 December 2016 is vulnerable to unrestricted upload of dangerous...
CVE-2016-9491——ManageEngine Applications Manager 12 and 13 before build 13690 allows an authenticated user, who is able to access /regi...
CVE-2016-9489——In ManageEngine Applications Manager 12 and 13 before build 13200, an authenticated user is able to alter all of their o...
CVE-2016-9487HIGH7.8EpubCheck 4.0.1 does not properly restrict resolving external entities when parsing XML in EPUB files during validation....
CVE-2016-9486——On Windows endpoints, the SecureConnector agent must run under the local SYSTEM account or another administrator account...
CVE-2016-9485——On Windows endpoints, the SecureConnector agent must run under the local SYSTEM account or another administrator account...
CVE-2016-9484——The generated PHP form code does not properly validate user input folder directories, allowing a remote unauthenticated ...
CVE-2016-9483——The PHP form code generated by PHP FormMail Generator deserializes untrusted input as part of the phpfmg_filman_download...
CVE-2016-9482——Code generated by PHP FormMail Generator may allow a remote unauthenticated user to bypass authentication in the to acce...
CVE-2016-6578HIGH8.8CodeLathe FileCloud, version 13.0.0.32841 and earlier, contains a global cross-site request forgery (CSRF) vulnerability...
CVE-2016-6567——SHDesigns' Resident Download Manager provides firmware update capabilities for Rabbit 2000/3000 CPU boards, which accord...
CVE-2016-6566——The valueAsString parameter inside the JSON payload contained by the ucLogin_txtLoginId_ClientStat POST parameter of the...
CVE-2016-6565——The Imagely NextGen Gallery plugin for Wordpress prior to version 2.1.57 does not properly validate user input in the cs...
CVE-2016-6564——Android devices with code from Ragentek contain a privileged binary that performs over-the-air (OTA) update checks. Addi...
CVE-2016-6563——Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D...
CVE-2016-6562——On iOS and Android devices, the ShoreTel Mobility Client app version 9.1.3.109 fails to properly validate SSL certificat...
CVE-2016-6559——Improper bounds checking of the obuf variable in the link_ntoa() function in linkaddr.c of the BSD libc library may allo...
CVE-2016-6558——A command injection vulnerability exists in apply.cgi on the ASUS RP-AC52 access point, firmware version 1.0.1.1s and po...
CVE-2016-6557——In ASUS RP-AC52 access points with firmware version 1.0.1.1s and possibly earlier, the web interface, the web interface ...
CVE-2016-6554——Synology NAS servers DS107, firmware version 3.1-1639 and prior, and DS116, DS213, firmware versions prior to 5.2-5644-1...

Check if your code is affected by 2016 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now